PATENT 

IN THE CLAIMS 

Please amend the claims as follows. This listing of the claims will replace all prior versions, 
and listings, of the claims in the Application. 

1 . (currently amended) A computer-implemented method for enabling users to remotely 
access a computer system using an active shared directory account maintained on a 
different computer system , comprising: 

facilitating authentication of a user using only information derived from 
said shared directory account, wherein said authenticating includes the 
computer system accessing said shared directory account on the 
different computer system; 
authorizing acc e ss to a comput e r syst e m by a us e r in respons e to 
determining that the user does not have a local account on the 
computer system in response to successfully authenticating the user 
thereby recognizing that the user is a non-local user with respect to the 
computer system;[[,]] 
wh e r e in said authorizing acc e ss includ e s s ucc e ssfully verifying that the 
us e r has an activ e shar e d directory account a s sociat e d with th e 
computer system ; 

selecting a universal local user account of the computer system in response 
to successfully identifying a recognized group membership affiliation 
for the user that corresponds to said shared directory account such that 
the universal local user account is selected dependent upon said shared 
directory account and the recognized group membership affiliation , 
wherein the universal local user account has access privilege on the 
computer system; and 

mapping the user to the universal local user account, wherein said 
mapping enables access to the computer system by the user in 
accordance with an access privilege level corresponding to the 
universal local user account. 
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2. (previously presented) The method of claim 1 wherein selecting the universal local 
user account of the computer system dependent upon said shared directory account 
includes determining at least one of directory services group membership information 
associated with said shared directory account and access privilege information 
associated with said shared directory account. 

3. (original) The method of claim 1 wherein said selecting the universal user account 
includes correlating a universal local user account access level to a corresponding 
group membership of the user. 

4. (original) The method of claim 1 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

each one of said universal local user accounts has a respective access 
privilege level associated therewith. 

5. (original) The method of claim 1 , further comprising: 

creating said plurality of universal local user accounts prior to performing 
said selecting, 

wherein each one of said universal local user access accounts has a 
respective access privilege level associated therewith. 

6. (cancelled) 

7. (cancelled) 

8. (original) The method of claim 1 wherein several users can be simultaneously mapped 
to the universal local user account for enabling simultaneous access by each one of 
said users to the computer system. 
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9. (currently amended) A computer-implemented method for enabling users to remotely 
access [[a]]the computer system using an active shared directory account maintained 
on a different computer system , comprising: 

facilitating authentication of a user using only information derived from 
said shared directory account wherein said authenticating includes the 
computer system accessing said shared directory account on the 
different computer system; 

determining that [[a]]the user of a comput e r syst e m does not have a local 
account on the computer system thereby recognizing that the user is a 
non-local status user with respect to the computer system; and 

associating the user with a universal local user account of the computer 
system after said determining and in response to successfully 
identifying a recognized group membership affiliation for the user that 
corresponds to said shared directory account such that the universal 
local user account is selected dependent upon said shared directory 
account and the recognized group membership affiliation after 
d e t e rmining that th e u se r ha s an activ e shar e d dir e ctory account 
associated with the computer system , wherein the universal local user 
account has access privilege on the computer system and wherein said 
associating enables access to the computer system in accordance with 
said access privilege corresponding to the universal local user account. 

10. (previously presented) The method of claim 9 wherein associating the user with the 
universal local user account includes determining at least one of directory services 
group membership information associated with said shared directory account and 
access privilege information associated with said shared directory account. 
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11. (original) The method of claim 9 wherein said associating includes correlating a 
universal local user account access level to a corresponding access level of a group 
membership of the user. 

12. (original) The method of claim 9 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

each one of said universal local user accounts has a respective access 
privilege level associated therewith. 

13. (original) The method of claim 9, further comprising: 

creating said plurality of universal local user accounts prior to performing 
said selecting, wherein each one of said universal local user access 
accounts has a respective access privilege level associated therewith. 

14. (canceled) 

15. (previously presented) The method of claim 13 wherein said user account selection 
information includes at least one of directory services group membership information 
and access privilege information. 

16. (previously presented) The method of claim 15 wherein said selecting the universal 
user account includes correlating a universal local user account access level to an 
access level of a group membership of the user. 

17. (canceled) 

18. (canceled) 
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19. (original) The method of claim 9 wherein several users can be simultaneously mapped 
to the universal local user account for enabling simultaneous access by each one of 
said users to the computer system. 
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20. (currently amended) A computer system, comprising: 
at least one data processing device; 

instructions processable by said at least one data processing device; and 
an apparatus from which said instructions are accessible by said at least 

one data processing device; and 
means for accessing an active shared directory account maintained on a 

different computer system; 
wherein said instructions are configured for enabling said at least one data 
processing device to facilitate: 

facilitating authentication of a user using only information derived 
from the active directory account, wherein said authenticating 
includes the computer system accessing said shared directory 
account on the different computer system; 
_authorizing access to a comput e r syst e m by a us e r in r e spons e to 
determining that the user does not have a local account on the 
computer system in response to successfully authenticating the 
user thereby recognizing that the user is a non-local user with 
respect to the first computer system;[[,]] 
wher e in said authorizing acc e ss include s s ucc e ssfully verifying 
that the user has an activ e shared directory account associated 
with th e computer syst e m ; 
selecting a universal local user account of the computer system in 
response to successfully identifying a recognized group 
membership affiliation for the user that corresponds to said 
shared directory account such that the universal local user 
account is selected dependent upon said shared directory 
account and the recognized group membership affiliation , 
wherein the universal local user account has access privilege on 
the computer system; and 
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mapping the user to the universal local user account, wherein said 
mapping enables access to the computer system by the user in 
accordance with an access privilege level corresponding to the 
universal local user account. 

21. (previously presented) The computer system of claim 20 wherein selecting the 
universal local user account of the computer system dependent upon said shared 
directory account includes determining at least one of directory services group 
membership information associated with said shared directory account and access 
privilege information associated with said shared directory account. 

22. (original) The computer system of claim 20 wherein said selecting the universal user 
account includes correlating a universal local user account access level to a 
corresponding group membership of the user. 

23. (original) The computer system of claim 20 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

each one of said universal local user accounts has a respective access 
privilege level associated therewith. 

24. (original) The computer system of claim 20 wherein said instructions are further 
configured for enabling said at least one data processing device to facilitate: 

creating said plurality of universal local user accounts prior to performing 
said selecting, 

wherein each one of said universal local user access accounts has a 
respective access privilege level associated therewith. 

25. (canceled) 
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26. (canceled) 

27. (original) The computer system of claim 20 wherein several users can be 
simultaneously mapped to the universal local user account for enabling simultaneous 
access by each one of said users to the computer system. 
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28. (currently amended) A computer system, comprising: 
at least one data processing device; 

instructions processable by said at least one data processing device; and 
an apparatus from which said instructions are accessible by said at least 

one data processing device; and 
means for accessing an active shared directory account maintained on a 

different computer system; 
wherein said instructions are configured for enabling said at least one data 
processing device to facilitate: 

facilitating authentication of a user using only information derived 
from the active shared directory account, wherein said 
authenticating includes the first computer system accessing said 
shared directory account on a different computer system; 
determining that [[a]]the user of a comput e r system does not have a 
local account on the computer system thereby recognizing that 
the user is a non-local status user with respect to the computer 
system; and 

associating the user with a universal local user account of the 
computer system after said determining and in response to 
successfully identifying a recognized group membership 
affiliation for the user that corresponds to said shared directory 
account such that the universal local user account is selected 
dependent upon said shared directory account and the 
recognized group membership affiliation after d e termining that 
th e user has an active shar e d directory account associated with 
th e comput e r syst e m , wherein the universal local user account 
has access privilege on the computer system and wherein said 
associating enables access to the computer system in 
accordance with said access privilege corresponding to the 
universal local user account. 
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29. (previously presented) The computer system of claim 28 wherein associating the user 
with the universal local user account includes determining at least one of directory 
services group membership information associated with said shared directory account 
and access privilege information associated with said shared directory account. 

30. (original) The computer system of claim 28 wherein said associating includes 
correlating a universal local user account access level to a corresponding access level 
of a group membership of the user. 

31 . (original) The computer system of claim 28 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

each one of said universal local user accounts has a respective access 
privilege level associated therewith. 

32. (original) The computer system of claim 28 wherein said instructions are further 
configured for enabling said at least one data processing device to facilitate: 

creating said plurality of universal local user accounts prior to performing 
said selecting, wherein each one of said universal local user access 
accounts has a respective access privilege level associated therewith. 

33. (canceled) 

34. (previously presented) The computer system of claim 32 wherein said user account 
selection information includes at least one of directory services group membership 
information and access privilege information. 
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35. (previously presented) The computer system of claim 32 wherein said selecting the 
universal user account includes correlating a universal local user account access level 
to an access level of a group membership of the user. 



36. (canceled) 



37. (canceled) 



38. (original) The computer system of claim 28 wherein several users can be 

simultaneously mapped to the universal local user account for enabling simultaneous 
access by each one of said users to the computer system. 
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